New Folder.zip
- SHA256 20d6cbe144223590d0d6f3c2560cd37608f1ffd81207133bd6698d0aefa71cb4
Static task
static1
3 signatures
General
- Target New Folder.zip
- Size 14.4MB
- Sample260922-ms8a9acc85
- SHA256 20d6cbe144223590d0d6f3c2560cd37608f1ffd81207133bd6698d0aefa71cb4
- MD5 6195afc6500b57a15672c412346a22a8
- SHA1 b220aced5aa0ba343fe2ef071f5b8dfecdd13008
- SHA512 1268a1bb3fa35ba7b8b2cec30302a681e06b1ac345d3771b8f870c7cd1080c88b2c7dcb47c04c4f4c11fffa4c5ff938fdd0ec4ac475cb08c6393349aeccb15d7
- SSDEEP 393216:qxufzG5RnWIfLBGkDogOZq5aX9xAY+Orrc7NLR5:qxkzwRnWMnDOZqAX9CY+NLH
- TLSH T133E6330917C23ABD71E7D4929785C9E2E209B0EF986B936F6D355414C303EA8D23D9F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/discord_game_sdk.dll - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/worldbox.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/UnityCrashHandler64.exe unpack001/UnityPlayer.dll
File Explorer
-
New Folder.zip.zip 14.4MB
-
UnityCrashHandler64.exe.exe 1.1MB
-
UnityPlayer.dll.dll 29.7MB
-
discord_game_sdk.dll.dll 3.7MB
-
worldbox.exe.exe 651KB
UnityCrashHandler64.exe
- IMPHASH 7b3f6a90eb536eecf8860677e4cd17a0
- SHA256 4325e591f7f62c421ad9f36ca0e15fe2bb9aae4e5b0d695a044ceafd17f4ded3
- MD5 df802def31d7706e8b3dac3b78bc7f6b
- SHA1 dd2c8f6cfa66caa1aa5225b4cd3755d98395a341
- SHA512 d73b5a4cf6c4545629b87862aa59e4d18d7b17c2f82ece97af84df436ecf9c893c20e262915e975561272356f575c44af0c9c2add9787bb449a78740a78227f6
- SSDEEP 12288:5o4M8g5CFF3vK3YjRJKC1Zj4xl6PwsinRZw2mtxb4TRq7QsoPo4njcKylQfz2fz7:5o4fg5CFWYii0zRZw2mX0M/wnoKz+zAY
- TLSH T1B5457D6A66A800E9D5779135C952490FE3F27C1907609BDF23A0B7A72F376E41E7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
dc:24:d2:4c:8c:62:f5:8d:1d:8f:00:dd:64:02:07:8a:cb:33:88:28:5e:08:08:2d:d2:85:89:08:23:6f:0b:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 5, 2025
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 11, 2023 - Jun 8, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
305840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win64_VS2019_nondev_m_m\UnityCrashHandler64.pdb
user32
SetWindowPos
SetForegroundWindow
LookupIconIdFromDirectoryEx
GetDlgItem
SendDlgItemMessageA
AdjustWindowRect
GetWindowLongA
DialogBoxParamA
SetWindowTextW
OffsetRect
EndDialog
SendMessageW
UnionRect
GetIconInfo
LoadImageA
CreateIconFromResourceEx
InflateRect
kernel32
DuplicateHandle
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeLibraryAndExitThread
GetConsoleOutputCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
InterlockedFlushSList
SetWaitableTimer
GetModuleHandleA
GetLastError
GetCurrentThread
WaitForSingleObjectEx
CloseHandle
RaiseException
GetProcAddress
SleepEx
GetThreadTimes
CreateWaitableTimerExW
OpenThread
TryEnterCriticalSection
EnterCriticalSection
SetThreadPriority
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetCurrentThreadId
ResumeThread
GetThreadPriority
CreateThread
SwitchToThread
DeleteCriticalSection
CreateDirectoryW
ReadFile
GetModuleFileNameA
FindFirstFileW
FindFirstFileExW
TlsSetValue
SetLastError
RtlCaptureContext
GetFullPathNameW
FindNextFileW
GetCurrentProcess
WriteFile
OutputDebugStringA
RemoveDirectoryW
RtlVirtualUnwind
SetFileTime
GetModuleFileNameW
RtlLookupFunctionEntry
SetFilePointer
SetEndOfFile
QueryDepthSList
FindClose
CreateFileW
GetFileAttributesW
SuspendThread
GetCurrentDirectoryA
SetFileAttributesW
CreateEventW
MultiByteToWideChar
GetFileAttributesA
GetFileAttributesExW
GetDiskFreeSpaceExW
LoadLibraryA
DeleteFileW
LoadLibraryW
GetThreadContext
SetFilePointerEx
MoveFileExW
ReplaceFileW
ReadProcessMemory
SystemTimeToFileTime
FreeLibrary
CopyFileW
WideCharToMultiByte
TlsGetValue
GetTempFileNameW
GetSystemTime
FlushFileBuffers
HeapFree
Thread32Next
Thread32First
WaitForSingleObject
CreateToolhelp32Snapshot
FormatMessageW
HeapAlloc
LocalFree
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
VerifyVersionInfoW
GetSystemTimeAsFileTime
GetStdHandle
TerminateProcess
GetProcessId
GetTempPathW
WaitForMultipleObjectsEx
OpenProcess
Sleep
SetEvent
GetThreadId
GetFileSize
CreateProcessW
CopyFileExW
AllocConsole
GetExitCodeProcess
SizeofResource
GetCommandLineW
EnumResourceNamesA
InitializeCriticalSection
SetErrorMode
FindResourceA
GetExitCodeThread
TerminateThread
LockResource
LoadResource
CreateEventA
LoadLibraryExW
GetFileSizeEx
CreateSemaphoreExW
VirtualFree
ReleaseSemaphore
VirtualAlloc
TlsAlloc
QueryPerformanceFrequency
TlsFree
QueryPerformanceCounter
IsDebuggerPresent
InterlockedPushEntrySList
RtlUnwindEx
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
UnregisterWaitEx
InterlockedPopEntrySList
GetEnvironmentVariableA
dbghelp
SymRegisterFunctionEntryCallback64
SymLoadModuleEx
shell32
SHGetKnownFolderPath
SHCreateDirectoryExW
CommandLineToArgvW
SHFileOperationW
ole32
CoTaskMemFree
CoInitializeEx
CoCreateGuid
shlwapi
PathCanonicalizeW
psapi
GetModuleFileNameExW
advapi32
GetUserNameA
wininet
InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
HttpQueryInfoA
HttpOpenRequestA
gdi32
GetObjectA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Name
.text
Size
582KB
Virtual Size
582KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
164KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
349KB
Virtual Size
349KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=28900,
count=187, id=261, version=28900,
count=28, id=260, version=28900,
count=1, id=199, version=41118,
count=145, id=261, version=29118,
count=19, id=260, version=29118,
count=10, id=259, version=29118,
count=1, id=262, version=28900,
count=29, id=257, version=28900,
count=280, id=1, productName=Unmarked objects,
count=62, id=265, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
UnityPlayer.dll
- IMPHASH 87130b1ad05419f6f8c81cee7f0f1378
- SHA256 c127164c473de7cdf4203e14c5e755cc7430fe2df41ec6f1b1ac45e8a7aa421b
- MD5 5c20a7c79d8ddfd1d98e1c61befb9eb7
- SHA1 19f161875bc59f28ea8328c07002c7f232405196
- SHA512 55fffe706b4ccdd06ade8caee073d6efc0e2b84858a51595ad7f9bf56e07e125ab4a9817f825967a3fa08c42f04b609451b715c3edd86dac79fdfbdd5590c267
- SSDEEP 393216:wAxhBQQ3+Sy8++pKNefyhcYDx+SE8ZBBZW7rDSbqDx:wF+kPUP+b8x
- TLSH T189679DA6B2F800D4E47BD074D65FA90BEBB1344A033086EB52E149956F73BF11ABB750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c0:f3:ba:ae:4b:f0:aa:6e:16:60:f4:94:ac:99:b7:39:76:11:a8:34:85:65:c0:45:84:85:53:6d:ca:bb:d2:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 5, 2025
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 11, 2023 - Jun 8, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
25161016
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\build\output\unity\unity\artifacts\UnityPlayer\Win64_VS2019_nondev_m_m\UnityPlayer_Win64_player_mono_x64.pdb
kernel32
HeapFree
CreateProcessW
CreatePipe
FlushFileBuffers
GetProcessId
OutputDebugStringA
WaitForMultipleObjects
GetExitCodeProcess
SetErrorMode
WriteFile
CreateEventW
GetSystemPowerStatus
GlobalMemoryStatusEx
CreateToolhelp32Snapshot
GetTempPathW
GetUserDefaultLocaleName
GetSystemDirectoryA
CreateFileA
GetComputerNameW
GlobalLock
GlobalUnlock
GlobalAlloc
GetTempFileNameW
DeleteFileW
K32GetProcessMemoryInfo
GetNativeSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
LocalFree
GetFileAttributesExW
CreateFileW
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
CopyFileW
MoveFileExW
FindFirstFileExW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
SetFilePointerEx
ReadFile
SetEndOfFile
ReplaceFileW
GetSystemTime
SystemTimeToFileTime
SetFileTime
GetDiskFreeSpaceExW
Thread32First
Thread32Next
SuspendThread
ExpandEnvironmentStringsW
CreateMutexA
RtlCaptureContext
SetUnhandledExceptionFilter
GetErrorMode
GetModuleFileNameA
GetFileAttributesA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetThreadContext
RtlLookupFunctionEntry
RtlVirtualUnwind
ReadProcessMemory
LocalAlloc
GetCurrentDirectoryW
DebugBreak
GetTickCount
GetOverlappedResult
ResetEvent
CancelIo
GetCurrentThreadId
GetWindowsDirectoryW
InitializeCriticalSection
DeleteCriticalSection
InitializeProcThreadAttributeList
LeaveCriticalSection
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetLocalTime
UpdateProcThreadAttribute
ReleaseSemaphore
GetFileSizeEx
CreateSemaphoreExW
TlsAlloc
TlsFree
GetStdHandle
SetThreadAffinityMask
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
GetFileSize
OpenEventA
CreateWaitableTimerA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
GetSystemDirectoryW
GetStringTypeW
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
GetVersionExW
DuplicateHandle
QueryDepthSList
UnregisterWaitEx
RtlUnwindEx
RtlPcToFileHeader
RtlUnwind
HeapSize
HeapReAlloc
GetThreadPriority
SetThreadPriority
ResumeThread
CreateThread
GetThreadTimes
OpenThread
GetModuleHandleA
GetCurrentThread
GetCommandLineW
OutputDebugStringW
GetLogicalProcessorInformationEx
LoadLibraryExW
WaitForMultipleObjectsEx
CreateEventExW
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
VerifyVersionInfoW
ExitThread
VerSetConditionMask
GetCurrentProcess
TerminateProcess
SetConsoleCtrlHandler
HeapQueryInformation
ExitProcess
GetModuleHandleExW
SetStdHandle
GetFileType
GetConsoleOutputCP
GetConsoleMode
DeleteProcThreadAttributeList
GetProcessHeap
GetTimeZoneInformation
RaiseException
SleepEx
SetWaitableTimer
HeapAlloc
WaitForSingleObject
GetStartupInfoA
SetLastError
GetFileAttributesW
GetModuleFileNameW
GetFullPathNameW
GetModuleHandleW
EnterCriticalSection
ReadConsoleW
GetDriveTypeW
GetFileInformationByHandle
SwitchToThread
CreateWaitableTimerExW
SetHandleInformation
SetEvent
WaitForSingleObjectEx
Sleep
CloseHandle
CreateEventA
FormatMessageW
LoadLibraryW
SetDllDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
VirtualProtect
VirtualFree
VirtualAlloc
GetSystemInfo
GetLastError
TlsGetValue
FormatMessageA
TlsSetValue
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
user32
GetCursorPos
GetMessageExtraInfo
GetKeyState
EnumDisplaySettingsW
MapVirtualKeyA
GetKeyboardLayoutNameW
ToUnicode
MapVirtualKeyW
GetAsyncKeyState
GetKeyNameTextW
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputData
GetRawInputBuffer
EnumDisplaySettingsA
GetDC
PtInRect
GetWindowLongA
SetWindowLongA
LoadIconW
GetWindowPlacement
AdjustWindowRectEx
GetForegroundWindow
ScreenToClient
GetRawInputDeviceList
GetKeyboardLayout
MapVirtualKeyExA
DispatchMessageW
TranslateMessage
SystemParametersInfoW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetCapture
ReleaseCapture
GetSystemMetrics
RegisterClassExW
DialogBoxParamW
EndDialog
SetDlgItemTextW
SetDlgItemTextA
LoadIconA
SendDlgItemMessageW
OffsetRect
CopyRect
SendMessageTimeoutA
SetForegroundWindow
EnumWindows
GetUserObjectInformationA
GetThreadDesktop
RegisterWindowMessageA
DestroyCursor
TrackMouseEvent
SetCursor
LoadCursorA
LoadImageW
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
AllowSetForegroundWindow
ReleaseDC
GetDesktopWindow
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
UpdateWindow
SendMessageW
GetMessageW
PeekMessageW
SetWindowTextW
DragDetect
ShowWindow
GetActiveWindow
GetParent
ValidateRect
IsIconic
MonitorFromRect
SetWindowLongPtrA
IsWindowVisible
SetCursorPos
ClientToScreen
ClipCursor
MonitorFromWindow
ShowCursor
GetClientRect
MoveWindow
GetWindowRect
GetMonitorInfoW
SetFocus
GetFocus
SetWindowPos
EnumDisplayMonitors
EnumDisplayDevicesA
GetMonitorInfoA
PostQuitMessage
DefWindowProcW
SetWindowLongPtrW
GetWindowLongPtrW
DestroyWindow
UnregisterClassW
RegisterClassW
CreateWindowExW
KillTimer
MessageBoxA
SetTimer
PeekMessageA
MsgWaitForMultipleObjects
GetCaretBlinkTime
GetDoubleClickTime
DestroyIcon
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
CoUninitialize
StringFromGUID2
CoCreateFreeThreadedMarshaler
CoInitialize
PropVariantCopy
CoCreateInstance
CoCreateGuid
CoSetProxyBlanket
CoTaskMemAlloc
PropVariantClear
CoTaskMemFree
shlwapi
PathCanonicalizeW
SHDeleteKeyW
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
advapi32
RegCreateKeyW
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
GetUserNameA
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExW
gdi32
ChoosePixelFormat
SetPixelFormat
GetDeviceCaps
SwapBuffers
shell32
SHGetKnownFolderPath
ShellExecuteW
SHGetFolderPathW
SHFileOperationW
CommandLineToArgvW
opengl32
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
wglGetCurrentDC
wglCreateContext
wglGetCurrentContext
winmm
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetDevCapsW
waveInPrepareHeader
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
waveInGetNumDevs
waveInGetDevCapsA
waveInGetDevCapsW
waveInOpen
timeBeginPeriod
timeEndPeriod
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveOutOpen
waveInReset
waveInClose
timeGetTime
oleaut32
VariantChangeType
VariantInit
SysFreeString
VariantClear
SysAllocString
imm32
ImmSetCompositionStringW
ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmGetConversionStatus
ImmReleaseContext
ImmGetContext
winhttp
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
bcrypt
BCryptGenRandom
hid
HidP_GetData
HidP_MaxDataListLength
HidD_GetSerialNumberString
HidD_GetManufacturerString
HidD_GetProductString
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetHidGuid
HidP_SetUsages
HidP_SetUsageValue
HidP_GetButtonCaps
HidP_GetValueCaps
HidD_GetAttributes
HidP_GetCaps
crypt32
CertFreeCertificateContext
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertAddEncodedCertificateToStore
CertOpenStore
CertCloseStore
ws2_32
listen
gethostname
getsockname
connect
WSAGetLastError
accept
closesocket
WSACleanup
WSAStartup
bind
htonl
inet_addr
htons
WSAIoctl
WSASetLastError
WSACancelAsyncRequest
shutdown
select
__WSAFDIsSet
ioctlsocket
setsockopt
sendto
ntohs
send
recvfrom
recv
WSASocketA
getaddrinfo
freeaddrinfo
ntohl
gethostbyname
getprotobyname
getpeername
inet_pton
getsockopt
WSAWaitForMultipleEvents
WSASocketW
WSACreateEvent
WSACloseEvent
gethostbyaddr
WSASendDisconnect
WSAAsyncGetHostByName
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
socket
dwmapi
DwmSetWindowAttribute
DwmGetWindowAttribute
UnityMain
Name
.text
Size
24.5MB
Virtual Size
24.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
300KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rodata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=259, version=28900,
count=18, id=260, version=29118,
count=31, id=259, version=29118,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=107, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,
count=34, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=234, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=67, id=260, version=28900,
count=43, id=257, version=28900,
count=548, id=1, productName=Unmarked objects,
count=9, id=199, version=41118,
count=144, id=261, version=29118,
count=223, id=261, version=28900,
count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=32, productName=Unmarked objects (old),
count=1186, id=265, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
discord_game_sdk.dll
- IMPHASH e2e8552d3acf24f9596a702c655d73d8
- SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
- MD5 d8cc567718550ae35c1566c3315b90df
- SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
- SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
- SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
- TLSH T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
1b:64:b0:ac:d8:16:1d:e5:87:74:8b:bc:b7:69:1b:a6:ef:fe:9d:d6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Nov 27, 2019
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
02:8a:a6:e7:b5:16:c0:d1:55:f1:5d:62:90:a4:30:e3
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 26, 2018 - Mar 31, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Minor OS version
0
Major OS version
6
Entry point
2801844
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\b\tyrande-1\discord\discord-game-sdk\target\x86_64-pc-windows-msvc\release\deps\discord_game_sdk.pdb
ws2_32
closesocket
sendto
getaddrinfo
WSAStartup
freeaddrinfo
WSACleanup
WSASocketW
ioctlsocket
recv
bind
WSAGetLastError
kernel32
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetModuleHandleExW
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
LoadLibraryW
GetLastError
GetProcAddress
FreeLibrary
GetModuleFileNameW
SetErrorMode
SetThreadErrorMode
lstrlenW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileInformationByHandle
CancelIoEx
WriteFile
ReadFile
GetOverlappedResult
FlushFileBuffers
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SetHandleInformation
GetSystemInfo
RtlVirtualUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
RtlCaptureContext
LoadLibraryA
DeleteCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
FindClose
SwitchToThread
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetTempPathW
GetCommandLineW
SetFilePointerEx
InitializeCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcessId
GetProcessHeap
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
HeapReAlloc
GetModuleHandleW
GetStdHandle
FindNextFileW
CreateFileW
DeviceIoControl
CreateDirectoryW
FindFirstFileW
DeleteFileW
FormatMessageW
ExitProcess
CreateThread
GetConsoleMode
WriteConsoleW
ReleaseMutex
WaitForSingleObjectEx
CreateMutexA
InterlockedFlushSList
GetFileType
GetStringTypeW
HeapSize
SetStdHandle
GetConsoleCP
GetCurrentProcess
HeapFree
RaiseException
RtlPcToFileHeader
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
InitializeSListHead
GetCurrentThreadId
advapi32
SystemFunction036
RegCloseKey
RegCreateKeyTransactedW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
ktmw32
CommitTransaction
CreateTransaction
ole32
CoTaskMemFree
shell32
ShellExecuteExW
SHGetKnownFolderPath
DiscordCreate
DiscordVersion
rust_eh_personality
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
851KB
Virtual Size
851KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=260, version=26715,
count=17, id=259, version=26715,
count=135, id=261, version=26715,
count=31, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=15, id=257, version=26715,
count=188, id=1, productName=Unmarked objects,
count=15, id=260, version=27032,
count=489, productName=Unmarked objects (old),
count=1, id=256, version=27032,
count=1, id=258, version=27032,
worldbox.exe
- IMPHASH ce1183cc150987a99aef5749f22af81e
- SHA256 44e896cda69c9bf36426e22c56458213c96c81c462970222e6edaf0c0400276b
- MD5 51470f958ba42a2318c72565e968ed2e
- SHA1 a04d4f4f2e74d22dff6ae628c167802537e70935
- SHA512 614e9b6161192db172e92b6faab18881031bd83722d5f8151b4b04efe0c2f6306b2a3ff13f81aa69bbf5179838d9a4b2d374adde758e00cde6fcde28466dec8d
- SSDEEP 6144:W/7FG9mpcJ/OD8YQKLnjKkV0VR+6twciPe7Rf:W/744aOD8y73ywbPE
- TLSH T15DE455C52849E402C3D148FCFA2698F46572BEE8E81EB88B7B443D13B27E671455F86D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
unityplayer
UnityMain
kernel32
HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
552KB
Virtual Size
552KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=28900,
count=138, id=261, version=28900,
count=10, id=260, version=28900,
count=2, id=257, version=28900,
count=39, id=261, version=29118,
count=16, id=260, version=29118,
count=9, id=259, version=29118,
count=3, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=89, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,